Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: VertiGIS Ltd. Component: Fm Clear all filters
TI-2026-03356 CVE-2026-3877 · GHSA-mc25-w9g7-hq9v

Reflected Cross-Site Scripting in Dashboard Search

Priority HIGH 67

A reflected cross-site scripting (XSS) vulnerability in the dashboard search functionality of the VertiGIS FM solution allows attackers to craft a malicious URL, that if visited by an authenticated victim, will execute a…

CVSS 4.0HIGH 7.3 Network No auth User interaction EPSS 0.00187 Published 2026-04-01 Fixed in 10.13.403 CWE-79
TI-2026-00330 CVE-2026-0522 · GHSA-v2gh-2f53-p2w4

Local File Inclusion in the File Upload/Download Process

Priority HIGH 68

A local file inclusion vulnerability in the upload/download flow of the VertiGIS FM application allows authenticated attackers to read arbitrary files from the server by manipulating a file's path during its upload.

CVSS 4.0HIGH 7.4 Network Low privileges No interaction EPSS 0.00619 Published 2026-04-01 Fixed in 10.11.363 CWE-610